This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json) Hash identifier: 6du8ohjbLEO+XksnfqTnppF5k1zwvloTXHn0Fja95iI= Subject key identifier: FA:A9:11:63:61:7F:02:E5:99:94:AB:53:87:B1:D5:A6:61:3F:0C:E7 Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e Certificate serial: 019AF464D3D36966B44049AA2F71A8839FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft Manifest number: 04F3 Signing time: Sat 06 Dec 2025 16:00:39 +0000 Manifest this update: Sat 06 Dec 2025 16:00:39 +0000 Manifest next update: Sun 07 Dec 2025 16:00:39 +0000 Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=) 2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: nrZwXDQfje3Sjv411NQAKz/g2ks94ovtHkq+HiZKegI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d3:d3:69:66:b4:40:49:aa:2f:71:a8:83:9f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e Validity Not Before: Dec 6 16:00:39 2025 GMT Not After : Dec 7 16:00:39 2025 GMT Subject: CN=faa91163617f02e59994ab5387b1d5a6613f0ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:13:7e:31:93:01:d3:a5:2c:53:5f:b8:47: 4c:96:7a:65:e9:3a:b4:36:9f:50:ee:37:14:cc:b4: 40:52:67:a9:90:cb:69:5a:0f:d4:5d:00:c9:9c:74: 0f:cb:94:00:c7:52:81:68:eb:87:c4:47:5d:34:03: dc:2f:50:04:7f:cb:3c:6e:10:cf:cf:52:bf:81:57: c2:6e:a6:18:7f:6b:a8:32:60:6a:10:36:cc:85:cf: 7e:da:db:ff:7a:6f:10:ab:f8:92:6e:92:c1:b5:f9: 7d:df:5f:9c:7e:21:6e:b9:e7:f6:d7:ff:5c:4f:fc: b1:3f:d2:c3:dd:b0:b4:96:61:d7:2a:96:49:11:dd: bb:0b:c1:b4:11:d7:8b:bb:6f:a2:ae:f3:4e:e7:ab: be:ae:bd:84:36:16:ab:33:59:5e:69:ab:bd:7d:1a: b7:08:98:e0:a9:fb:70:fc:1a:e4:01:76:1c:b3:c1: e0:e4:53:85:2e:76:f7:5c:3c:37:1a:f1:51:5c:03: c3:37:a7:49:31:38:4c:22:d1:4e:a1:a4:f2:8b:f6: 62:a4:6c:98:6a:52:c5:58:1b:ed:f1:fe:fc:c4:c3: 6f:fc:04:5c:cb:31:17:fd:18:a9:72:58:a5:41:09: 82:69:55:03:83:db:3a:6c:e5:3a:71:a9:65:dd:e5: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:11:63:61:7F:02:E5:99:94:AB:53:87:B1:D5:A6:61:3F:0C:E7 X509v3 Authority Key Identifier: keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:45:dc:eb:86:b2:08:f1:27:f5:52:07:f4:b5:12:0c:a7:d5: 14:39:5b:5d:71:d8:95:d5:3f:49:28:bc:5e:02:23:8f:9f:21: 31:ac:da:d3:d2:50:af:d6:43:cc:63:96:fd:e5:c5:66:65:9e: 36:1f:b4:9d:cc:45:55:ce:58:a9:fa:bf:be:86:c4:a9:77:2a: d6:4e:2e:91:24:7c:8d:e9:06:78:bc:57:88:20:a9:f5:ad:99: 39:41:ee:11:54:e9:4b:f0:a5:b6:8e:f2:7b:28:6b:aa:8e:8e: c2:00:da:c7:58:38:d8:30:a1:bf:5a:43:a7:76:a9:5e:21:7b: b9:4e:96:79:cf:f7:4f:7b:ad:5a:f7:d6:b4:e9:88:f6:1f:24: c4:60:82:41:91:e5:45:1f:3b:53:e2:f0:89:96:56:e2:98:e0: a5:c3:a7:97:6f:b5:d6:7f:38:e1:c9:34:6a:5e:45:6e:d1:fa: 40:e6:11:94:c4:94:85:10:d9:f9:86:56:50:ff:3b:f1:9d:9c: a8:d6:75:0d:0a:82:e7:7c:f7:56:ca:8e:1c:69:de:0f:fb:07: 9d:fc:f2:04:59:79:f1:40:37:e2:2e:76:06:0c:f7:d5:5c:7d: db:2a:4b:7f:eb:df:8f:1d:40:a0:cf:ba:e7:62:df:3c:45:2f: f0:27:a9:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNPTaWa0QEmqL3Gog5/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzYwOWM4OGYzOGRiYjU0OGExZjAyZjg5ZmYyOWJiNmQx ODg2NGUwHhcNMjUxMjA2MTYwMDM5WhcNMjUxMjA3MTYwMDM5WjAzMTEwLwYDVQQD EyhmYWE5MTE2MzYxN2YwMmU1OTk5NGFiNTM4N2IxZDVhNjYxM2YwY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ETfjGTAdOlLFNfuEdMlnpl6Tq0 Np9Q7jcUzLRAUmepkMtpWg/UXQDJnHQPy5QAx1KBaOuHxEddNAPcL1AEf8s8bhDP z1K/gVfCbqYYf2uoMmBqEDbMhc9+2tv/em8Qq/iSbpLBtfl931+cfiFuuef21/9c T/yxP9LD3bC0lmHXKpZJEd27C8G0EdeLu2+irvNO56u+rr2ENharM1leaau9fRq3 CJjgqftw/BrkAXYcs8Hg5FOFLnb3XDw3GvFRXAPDN6dJMThMItFOoaTyi/ZipGyY alLFWBvt8f78xMNv/ARcyzEX/RipclilQQmCaVUDg9s6bOU6call3eVq/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqpEWNhfwLlmZSrU4ex1aZhPwznMB8GA1UdIwQY MBaAFKg2CciPONu1SKHwL4n/KbttGIZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2Ut ZTQwZmUwYjA5NGIwLzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2UtZTQwZmUwYjA5NGIw LzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUXc64ay CPEn9VIH9LUSDKfVFDlbXXHYldU/SSi8XgIjj58hMaza09JQr9ZDzGOW/eXFZmWe Nh+0ncxFVc5Yqfq/vobEqXcq1k4ukSR8jekGeLxXiCCp9a2ZOUHuEVTpS/Clto7y eyhrqo6OwgDax1g42DChv1pDp3apXiF7uU6Wec/3T3utWvfWtOmI9h8kxGCCQZHl RR87U+LwiZZW4pjgpcOnl2+11n844ck0al5FbtH6QOYRlMSUhRDZ+YZWUP878Z2c qNZ1DQqC53z3VsqOHGneD/sHnfzyBFl58UA34i52Bgz31Vx92ypLf+vfjx1AoM+6 52LfPEUv8Cep4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:20 2025 by rpki-client